CVE-2026-8461 | FFmpeg up to 8.1.1 MagicYUV Decoder out-of-bounds write

June 18, 2026 Yanac

A vulnerability has been found in FFmpeg up to 8.1.1 and classified as critical. This affects an unknown function of the component MagicYUV Decoder. This manipulation causes out-of-bounds write.

This vulnerability appears as CVE-2026-8461. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More